Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: h7gx7fjVpKsM6wM7/qYlrcDq9HRU7De64OO2tpR2JXM=
Subject key identifier: A2:E0:2D:97:44:FF:B7:F5:2A:73:F9:48:AA:EF:90:F1:AF:01:87:A4
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019E2F96D751DB3B5A94B6E33F73552018DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 190B
Signing time: Sat 16 May 2026 07:01:15 +0000
Manifest this update: Sat 16 May 2026 07:01:15 +0000
Manifest next update: Sun 17 May 2026 07:01:15 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: EyStg5/q/CB1BjBHlXtexpVaKoGInK8/ehprJ1v7M4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:d7:51:db:3b:5a:94:b6:e3:3f:73:55:20:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: May 16 07:01:15 2026 GMT
Not After : May 17 07:01:15 2026 GMT
Subject: CN=a2e02d9744ffb7f52a73f948aaef90f1af0187a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:78:5d:54:de:67:e7:0e:51:ed:51:0e:bf:
b2:45:24:b7:a5:da:69:63:d7:6d:e7:64:82:34:bb:
94:b2:f9:21:07:74:dd:05:54:e3:af:81:3a:30:48:
38:d5:b0:91:a3:55:f3:f2:bf:d9:57:39:06:75:41:
b9:a5:91:83:d4:a9:e0:59:cb:e2:e1:e2:e5:bb:1d:
bb:68:77:a3:02:a5:5f:99:90:99:38:14:79:96:5e:
48:04:0b:3c:bd:38:45:50:34:08:ff:9e:70:a9:ef:
d9:e1:c0:c0:70:75:75:60:5e:ae:b0:3d:bc:32:06:
cf:41:8a:73:45:f4:e4:c3:d0:a2:86:be:f1:3c:cd:
3c:13:a9:41:e2:f7:52:13:0a:ba:07:02:26:82:83:
16:a8:16:68:5f:d9:ff:b9:75:b1:79:31:ff:60:62:
a5:69:da:12:e7:19:7b:3c:31:16:10:f6:75:5e:4f:
d5:13:1e:97:be:77:77:67:e6:a9:5e:03:16:c3:dd:
79:49:45:d3:74:cb:6b:c8:b3:a0:e9:4f:fe:78:4b:
15:7b:5c:a7:0e:3c:ba:2f:04:0d:df:d5:2d:b3:0c:
64:b5:5c:4d:a3:cf:c6:7d:e2:d8:7f:1e:11:dc:31:
78:05:45:dc:b3:83:27:cc:5a:be:b2:03:2a:ef:96:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:2D:97:44:FF:B7:F5:2A:73:F9:48:AA:EF:90:F1:AF:01:87:A4
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:df:b2:65:75:08:ce:1c:bd:ab:f9:69:15:77:1e:24:3e:80:
dd:b4:5a:87:ae:1a:a4:7e:c7:67:fb:d4:65:60:e6:56:1f:a9:
42:58:b0:f0:61:44:eb:ce:49:7a:b2:4a:dc:fc:ed:69:5a:63:
a9:d5:bb:9a:48:e7:c3:b3:39:7c:10:d6:e8:e2:70:ff:f6:98:
d3:21:6f:f8:1f:fc:6e:71:cb:8a:43:1f:67:62:5c:fd:40:3e:
d5:85:a8:56:97:5b:e2:cf:c4:f8:25:82:34:32:bc:e9:7f:e9:
06:65:3b:03:78:60:20:ea:44:07:e5:71:64:c5:70:38:14:ab:
27:a5:24:52:e8:0d:c9:5b:21:fe:29:d1:a1:b4:f2:7b:7c:46:
5a:57:e4:33:9f:66:3b:45:b3:1d:2e:b4:cd:36:86:f6:45:db:
7e:16:db:5e:3b:a0:b9:05:31:16:8d:97:6c:40:e0:0f:7b:c6:
7d:e2:70:c0:b5:85:56:39:7e:63:ff:3b:ac:60:e1:1b:cc:95:
e6:3c:c3:62:37:b8:00:b2:27:3b:ca:52:61:2a:ca:19:24:fd:
d6:e3:83:98:17:be:05:97:08:58:ff:3c:f2:c3:08:f3:8d:ad:
0a:36:52:21:d5:bd:7d:aa:c5:00:dd:b3:a3:07:16:74:97:a5:
06:09:b9:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vltdR2ztalLbjP3NVIBjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj
MmYzZmIwHhcNMjYwNTE2MDcwMTE1WhcNMjYwNTE3MDcwMTE1WjAzMTEwLwYDVQQD
EyhhMmUwMmQ5NzQ0ZmZiN2Y1MmE3M2Y5NDhhYWVmOTBmMWFmMDE4N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4V4XVTeZ+cOUe1RDr+yRSS3pdpp
Y9dt52SCNLuUsvkhB3TdBVTjr4E6MEg41bCRo1Xz8r/ZVzkGdUG5pZGD1KngWcvi
4eLlux27aHejAqVfmZCZOBR5ll5IBAs8vThFUDQI/55wqe/Z4cDAcHV1YF6usD28
MgbPQYpzRfTkw9Cihr7xPM08E6lB4vdSEwq6BwImgoMWqBZoX9n/uXWxeTH/YGKl
adoS5xl7PDEWEPZ1Xk/VEx6Xvnd3Z+apXgMWw915SUXTdMtryLOg6U/+eEsVe1yn
Djy6LwQN39UtswxktVxNo8/GfeLYfx4R3DF4BUXcs4MnzFq+sgMq75bsAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLgLZdE/7f1KnP5SKrvkPGvAYekMB8GA1UdIwQY
MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt
ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2
LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9+yZXUI
zhy9q/lpFXceJD6A3bRah64apH7HZ/vUZWDmVh+pQliw8GFE685JerJK3PztaVpj
qdW7mkjnw7M5fBDW6OJw//aY0yFv+B/8bnHLikMfZ2Jc/UA+1YWoVpdb4s/E+CWC
NDK86X/pBmU7A3hgIOpEB+VxZMVwOBSrJ6UkUugNyVsh/inRobTye3xGWlfkM59m
O0WzHS60zTaG9kXbfhbbXjuguQUxFo2XbEDgD3vGfeJwwLWFVjl+Y/87rGDhG8yV
5jzDYje4ALInO8pSYSrKGST91uODmBe+BZcIWP888sMI842tCjZSIdW9farFAN2z
owcWdJelBgm5Lw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:57 2026 by rpki-client